Messages

31

Apache / Re: Not Default But any Unknown Page called at all hosted domain in CWP

« on: July 21, 2017, 06:44:37 AM »

I was just showing you where the file lives, as you discovered deleting it won't help 

The fact that traffic is  arriving at that page tells us there is something not configured correctly but it's difficult to know where. Did you rebuild Apache and Vhosts + check DNS as suggested?

32

SSL / Re: AutoSSL in CWP "SSL Cert Manager", is that auto renew?

« on: July 21, 2017, 06:14:12 AM »

I think It's supposed to auto renew but doesn't seem to be working at the moment.

If you want to use Auto SSL Cert manager and need auto renew I posted a workaround here which gets it done with a few extra steps.

http://forum.centos-webpanel.com/ssl/autorenew-ssl-is-enabled-yet-my-certificates-will-expired-after-6-days/msg12609/?topicseen#msg12609

33

Apache / Re: Not Default But any Unknown Page called at all hosted domain in CWP

« on: July 20, 2017, 03:49:20 PM »

It has a different location

usr/local/apache/htdocs/index.html

34

Apache / Re: Not Default But any Unknown Page called at all hosted domain in CWP

« on: July 20, 2017, 12:06:07 PM »

I think this is the Apache webserver default index.html page.

I'd try rebuilding your Apache server including Virtual Hosts and make sure your DNS stuff is correct.

35

SSL / Re: autorenew ssl is enabled yet my certificates will expired after 6 days

« on: July 19, 2017, 07:42:15 AM »

OK so given that my SSL certs were soon to expire and were yet to auto renew I took a look & developed a work around. It seems that the SSL's weren't set up using acme.sh which is what runs the auto renew cron job.

To fix this we need to firstly issue the certs using acme.sh & then install them into our default cert folders. They should then auto renew for us via the cron job when less than 30 days.

Instructions:

• Make sure all your SSL's have been set up in the SSL Cert Manager and are working
• Access your server as Root user using your preferred method
• Run the below command whereby (/home/folder-name/public_html is your DocumentRoot & your-domain.com is your domain). I circled where you can find your DocumentRoot in red (in image below) in your SSL Cert Manager.

Code: [Select]

acme.sh  --issue  -d your-domain.com -w /home/folder-name/public_html

• Copy the issued certs to your default cert folders using the below command

Code: [Select]

acme.sh --install-cert -d your-domain.com --cert-file /etc/pki/tls/certs/your-domain.com.cert --key-file  /etc/pki/tls/private/your-domain.com.key --fullchain-file /etc/pki/tls/certs/your-domain.com.bundle

• Make sure the cron job is set up in Server Settings > CronTab. If it isn't you can auto create it by running the below command

Code: [Select]

acme.sh --install-cronjob

• Test the cron job is working using the below code (You should see all of your SSL certs successfully renew to 89 days).

Code: [Select]

acme.sh --cron

You should now have successfully set up CWP/CentOS to auto renew all your SSL's via the cron job. The below image illustrates that the cron job auto renewed them on my server at 04:51:00.



Hoping this helps someone faced with the same issue and be nice if our admins sees and incorporates a fix in CWP 

Some tips:

- If you receive an (Accessing .well-known/acme-challenge/...) error, delete and recreate the .well-known folder ensuring it has the right permissions.
- If you need to do more than 5 auths or issues on the same domain while you're sorting something out include (--staging) in the command to prevent getting locked out after 5 attempts (this points the request to the Let's Encrypt sandbox).

***Please note: This work around is good with both my servers (CWP6 & CWP7) however as SSL failures can result in complete loss of site access  I strongly advise you to have a working backup that you can simply revert back to if it's not right for you.

36

SSL / Re: autorenew ssl is enabled yet my certificates will expired after 6 days

« on: July 16, 2017, 05:52:59 AM »

You can manually delete the SSL cert and re-create it via the SSL manager which is a work around for now.

Obviously it would be much better if we could have the auto renew working correctly in the near future 

37

SSL / Re: autorenew ssl is enabled yet my certificates will expired after 6 days

« on: July 15, 2017, 11:15:52 AM »

Yep I'm in the same boat. I think the AutoSSL installs the certs in a different folder than acme.sh (eg: the cron job is pointed at) is expecting it to be in.

Thus we'll need an admin to have a look and provide a fix.

38

SSL / Re: autorenew ssl is enabled yet my certificates will expired after 6 days

« on: June 30, 2017, 01:29:52 PM »

I'm using AutoSSL for my SSLs (LetsEncrypt is unistalled) but they are not auto updating and are now less than 30 days till expiring.

The cron job is there (15 0 * * * "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" > /dev/null) but it doesn't seem to have any effect. I can see the SSLs in the SSL vHost Manager & they work but if i run

Code: [Select]

acme.sh --list 
I get a blank output list

Code: [Select]

Main_Domain  KeyLength  SAN_Domains  Created  Renew
I've also tried to force renew them using

Code: [Select]

acme.sh --renew -d mydomain.com.au --force
which returns

Code: [Select]

'mydomain.com.au' is not a issued domain, skip.
I want the SSL's to auto update themselves but I'm not sure how to progress.

39

Information / Re: Users website getting Connection refused.

« on: June 26, 2017, 11:14:58 AM »

Hi, nice to see another Aussie in here 

Did you disable CFS to see if it causing the issue? Also I notice you're using CloudFlare for DNS, have you changed any settings there recently which might be affecting it? 

40

DNS / Re: rDNS / PTR Record Question

« on: June 21, 2017, 10:08:36 AM »

Yep, this is how mine is set up. I use CloudFlare too 

41

E-Mail / Re: system mail not sending

« on: June 03, 2017, 01:11:15 AM »

I use CloudFlare as DNS too and email works fine. Some thoughts below for you.

• Make sure MX entry in CloudFlare has grey cloud (DNS only)
• Have you successfully set up rDNS
• Have you  set up DKIM & SPF and added matching entries to CloudFlare (this is not essential but recommended to keep your emails out of spam filters)

42

CentOS 6 Problems / Re: Service Monitor

« on: June 02, 2017, 09:29:58 AM »

k, can you can reinstall Icinga, remove cron via UI then unistall?

43

CentOS 6 Problems / Re: Service Monitor

« on: June 01, 2017, 02:32:38 PM »

CWP > Services Config > ServicesMonitor (init)

Think this is what you want

 

44

SSL / Trying to force SSL renew but not working

« on: May 31, 2017, 02:35:11 PM »

Hi All,

I am trying to force a renew for a SSL that was installed via the SSL Cert Manager using the Auto button. It installed and functions fine however I can't seem to get it to renew. Have tried on 2 different servers one with CWP6 & another with CWP7 using different domains but same result.

 Using

Code: [Select]

acme.sh --renew -d 6sense.com.au --force



 I still have some time before 60 days is up but wanted to ensure that the renew was working. Any thoughts/ideas are welcome.

45

SSL / Re: Replace self signed CWP SSL cert on server hostname with letīs encrypt ssl cert

« on: May 24, 2017, 01:22:45 PM »

Just select your hostname.cert from the Certificate dropdown box and use AutoSSL.